Windows exploit techniques: from any directory you create to any file-read-vulnerability warning-the black bar safety net

One, Foreword In the past few months, I'm in meetings, introduced me to the“Windows logic privilege escalation guide”tips. Meeting length is only 2 hours, I would like to introduce many interesting techniques and tricks had to have been deleted. Over time, think in training courses complete about...

Microsoft Windows - VHDMP Arbitrary File Creation Privilege Escalation (MS16-138) Exploit

Exploit for windows platform in category local exploits / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=914 Windows: VHDMP Arbitrary File Creation EoP Platform: Windows 10 10586 and 14393. Unlikely to work on 7 or 8.1 as I think it’s new functionality Class: Elevation of...

Microsoft Windows - VHDMP Arbitrary File Creation Privilege Escalation (MS16-138)

/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=914 Windows: VHDMP Arbitrary File Creation EoP Platform: Windows 10 10586 and 14393. Unlikely to work on 7 or 8.1 as I think it’s new functionality Class: Elevation of Privilege Summary: The VHDMP driver doesn’t safely create fil...

Microsoft Windows - VHDMP Arbitrary File Creation Privilege Escalation (MS16-138)

Microsoft Windows - VHDMP Arbitrary File Creation Privilege Escalation MS16-138 / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=914 Windows: VHDMP Arbitrary File Creation EoP Platform: Windows 10 10586 and 14393. Unlikely to work on 7 or 8.1 as I think it’s new functionality...

AhnLab V3 Internet Security 8.0 < 1.2.0.4 - Local Privilege Escalation

AhnLab V3 Internet Security 8.0 with AhnRec2k.sys = 1.2.0.4 Local Kernel Mode Privilege Escalation Vulnerability AUTHOR MJ0011 EMAIL thdecoder $ 126.com VULNERABLE PRODUCTS AhnLab V3 Internet Security = 8.0.3.28（build 746 DETAILS: AhnRec2k.sys create a device called "AhnRecDrv" , and handles...

AhnLab V3 Internet Security 8.0 1.2.0.4 - Local Privilege Escalation

AhnLab V3 Internet Security 8.0 1.2.0.4 - Local Privilege Escalation AhnLab V3 Internet Security 8.0 with AhnRec2k.sys = 1.2.0.4 Local Kernel Mode Privilege Escalation Vulnerability AUTHOR MJ0011 EMAIL thdecoder $ 126.com VULNERABLE PRODUCTS AhnLab V3 Internet Security = 8.0.3.28（build 746 DETAIL...

CVE-2004-0767

The CVE-2004-0767 entry concerns NGSEC StackDefender 1.10. The vulnerability arises when an invalid address is supplied for the ObjectAttributes parameter to the hooks for ZwCreateFile and ZwOpenFile, potentially allowing a denial of service via a system crash. The available documentation provide...